Staff

Hello! Something is blocking OpenVPN: Mon Nov 11 11:59:27 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Since you can connect with your iPod, it should not be a block from your university. For testing purposes, can you momentarily disable your firewall and try again? Kind regards

Hello, very well. Yes, the configuration (but not necessarily the date and time) stays. You might like to have your router connect to an NTP server to sync date and time at each reboot or periodically. Kind regards

Hello, how did you forward the port to the web server private IP address? A simple DNAT is necessary, please compare your solution with this: https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/ Kind regards

Hello! The most immediate problem we can see is that the date set in your router prevents authentication because in 1970 our certificates were not valid. Please set the correct date and time. Kind regards

Hello, please see here: https://airvpn.org/topic/10266-i-didnt-realize-windows-calls-home In this case everything looks horribly "wrong by design", unfortunately. By the way, the suggested patch in the article linked in the post should solve your issue. Kind regards

Hello, your last post was approved almost immediately and a full reply was given, please see https://airvpn.org/topic/9366-i-love-airvpn/page-2?do=findComment&comment=13261 These messages are being merged into the same topic. Kind regards

Hello, puzzling. The first thing that would come to mind is an RST packet from your ISP (see https://grepular.com/Punching_through_The_Great_Firewall_of_TMobile just out of curiosity) but we think it's unlikely (the ISP would send an RST packet only when the data throughput gets higher thanks to p2p...?). What happens if you try UDP? Kind regards

Hello, if you run Windows 7/8, OpenVPN 2.2.2 should be upgraded to 2.3.2. The TUN/TAP interface does not come up. Please check that no program (such as antivirus) is blocking OpenVPN. If the problem persists please try a TCP/IP stack and Winsock catalog reset, then reboot the system. Please see the following post for instructions on the reset and a check list: https://airvpn.org/topic/8320-solved-connects-but-ip-doesnt-change-on-windows-server-essentials-2012/?do=findComment&comment=8321 If the problem still persists, please uninstall OpenVPN 2.2.2 and install OpenVPN 2.3.2. Kind regards

@Rayban The quickest way is connecting from your computer to make a comparison with same ports and servers. Your router CPU should be able to sustain an AES-256 throughput of about 7-9 Mbit/s. The TCP overhead might have caused the slower performance you report (2.9 Mbit/s), but there can be other factors which are difficult to determine. Also, do not rely on speedtest.net, there's too much bias, take measurements on the ground, with actual Internet usage (download large files from different hosts, perform several tests with the VPN server internal speedtest etc.). Again, the optimal performance of the router when encrypting/decrypting on the fly small blocks of data should be from 7 to 9 Mbit/s with AES-256-CBC cipher. Anyway, testing a connection from a computer (disabling OpenVPN on the router) can show whether the 2.9 Mbit/s bottleneck (assuming that 2.9 Mbit/s is a correct bw detection) is in Tomato. Remember to test by connecting to port 53 UDP as well. Kind regards

Strange, I am hoping this is not the case. Perhaps they meant something else because that's not what they said a few years ago: https://airvpn.org/topic/54-using-airvpn-over-tor/?p=920 https://airvpn.org/topic/54-using-airvpn-over-tor/?p=934 If they did say that, this is one of my dislikes/fears of this great provider growing to much: https://airvpn.org/topic/10034-ill-try-to-be-honest-for-those-looking-into-a-vpn-provider/?p=12604 Hello, there is no contradiction. We confirm that we can't be held responsible for external proxies or any other service that we do not operate. The fact that when possible we try to provide support for external services, programs or we teach basic things unrelated to our service in private is a courtesy which goes well beyond the scope of any customer service and has nothing to do with the size and the growth rate of AirVPN. Under no circumstance a courtesy must be considered a duty. Kind regards

Hello, Virgin Media infrastructure is insufficient to deliver the nominal peak bandwidth to all of their customers at the same time, so they perform traffic shaping on protocol-discriminatory basis, see their statement: http://help.virginmedia.com/system/selfservice.controller?CMD=VIEW_ARTICLE&ARTICLE_ID=3103 This is typical practice of every ISP which operates an infrastructure which, due to heavy overselling, is totally inadequate to support on a regular basis the nominal, "promised" peak bandwidth to every customer at the same time. You might like to try OpenVPN over SSL to port 443, and OpenVPN over SSH to port 80, just to see if they shape those protocols less than OpenVPN. Kind regards

Hello, please try to connect to different ports and protocols (in particular test port 53 UDP), and try different servers. Also, test a connection from your computer, to check whether the bottleneck is in Tomato. Kind regards

Hello, theoretically yes, Java applets can read all the system network cards. If your system is behind another NAT (for example a router) your real IP address is not included on any of the network cards so the risk is minimal. However, some other potential security issues must be taken into consideration, so make sure to run always the latest available Java version, and disable Java every time it is not strictly necessary (which should not be a big deal, since Java usage on the www has shrunk a lot in the last years). To some readers: Java must not to be confused with Javascript, they are totally different things. Kind regards

Hello, please make sure that in OpenVPN you use TCP (the proxy does not support UDP). Kind regards

Hello, as a first check, please make sure that in OpenVPN you select the TCP mode (the http proxy does not support UDP) and try port 80 or 443 (as VPN connection port - port 8080 for the proxy looks correct because it responds). Kind regards

Hello! Consider that the main Client Area page reports 3 IP addresses: the IP address of the VPN server you're connected to (VPN server entry-IP), the VPN server exit-IP address (i.e. the IP address your system is visible on the Internet IF there are not further tunnels), and the IP address that the server sees for your system connection, which may be your ISP IP address, if the system is connected directly, or not, if the system is connected over some other proxy or VPN etc. The airvpn.org web page, in the central bottom box, reports the IP address detected for your system by the web server. If it's red, the IP address is not one of the Air VPN servers exit-IP addresses: this implies either that your system is not tunneling traffic, OR that it's tunneling properly but the outgoing traffic is additionally tunneled, so that the web server sees the final exit-IP address of the node that's forwarding packets to the VPN server. Example 1: your system connects directly with OpenVPN, then (on the same system) you launch TOR and you browse to the web site with the TOR browser or any other browser configured to connect over TOR. The web site server will see the TOR exit-node IP address, and the central bottom box will be red (but this does NOT mean that your system is not connected to the VPN). The Client Area shows that the connection comes from your real IP address. Our servers can't see the traffic content of the applications configured to connect over TOR. Example 2: your system connects with OpenVPN over TOR. The web site server will see the VPN server exit-IP address and the central bottom box will be green. The Client Area shows that the connection comes from the TOR exit-node IP address. Our servers can't see your real IP address and all the TOR nodes can't see the traffic content of any of your applications (still/already encrypted by OpenVPN), EXCEPT those configured to connect over the same TOR proxy that OpenVPN is connected to. Kind regards

@rayban Hello! The "readme" of the page you linked claims that Asus RT-AC68U is a supported device. Also, that firmware build includes OpenVPN client and server, therefore, assuming that your router model is an RT-AC68U, you should have no problems to connect to our services. Instructions for Tomato might be a better reference than those for DD-WRT, in this case. Kind regards

Hello! Can you please send us the logs of an alleged connection? If you can't ping 10.4.0.1, chances are that either your system is not tunneling traffic or that the connection has not been established at all... Kind regards

Hello! Actually "VideoRanger" subscription expired some days ago. You can check anytime your account status by logging in the web site and clicking "Client Area" from the upper menu. Kind regards

Hello! If the log file is not generated, chances are that OpenVPN was not running at all, can you please check? Kind regards

Hello! The correct command is "ipconfig /all", you entered a wrong command, anyway from the route print we can see that something is wrong with the routing table. Can you please try a TCP/IP stack and Winsock reset, the reboot the computer? Please see here: http://bit.ly/12VTrhD Kind regards AirVPN Support Team

Hello! The TUN/TAP adapter (the virtual network interface used by OpenVPN) does not come up. Does it happen even with Comodo disabled? If so, please try a TCP/IP stack and Winsock resets, according to the following instructions: https://airvpn.org/topic/8320-solved-connects-but-ip-doesnt-change-on-windows-server-essentials-2012/?do=findComment&comment=8321 Kind regards

Hello, yes, just bind sshd to eth0 IP address. Kind regards

Hello! Please right-click on the Air tray icon and select "Logs". Click "Copy to clipboard" and paste into your message. Kind regards

Hello, can you please issue the following commands and send us the output? ping 10.4.0.1 ping google.com ping 8.8.8.8 Kind regards